PIX and Watchguard Firebox Interoperability

[dayhawk]

We have only PIX 515 and 525 firewalls in the core of our network. Because of the 3Mbps limitation of IPSEC throughput on the PIX 501 we are thinking of implementing Firebox firewalls/VPN devices at our small remote sites (1-2 users) instead.

Does anyone have any experience with getting these 2 differenct devices to work in harmony? I am curious of what issues we may be looking at by doing this.

Thank you very much in advance for your input.

 

[dopehead]

Hmm, havent tried it. usually stuff like DPD (dead peer detection) creates a few problems that might or might not give you some hurdles to ivercome. otherwise as long as you stick to regular legacy isakmp/esp it should not pose a problem.


Network Systems Engineer
CCNA/CQS/CCSP/Infosec

 

[dayhawk]

Any experience with how well Netscreens and PIXs work together?

 

[colinT23]

Hi,

I've never tried it but have a look at:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00801c4445.shtml

Regards Colin.